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1 Field Of The Invention 

2 The invention relates generally to the field of digital information communications, and more 

3 particularly to systems and methods for reducing the amount of bandwidth that may be taken up by looping 

4 message packets in a local area network. 

5 BACKGROUND OF THE INVENTION 

6 Digital networks have been developed to facilitate the transfer of information, including data and 
7=, programs, among digital computer systems and other digital devices. A variety of types of networks have 
I! been developed and implemented, including so-called "wide-area networks" (WAN's) and "local area 
51 networks" (LAlNPs),wMchtransferMormationra^ Generally, 
1 fti LAN's are implemented over relatively small geographical areas, such as within an individual office facility 
1 K or the like, for transferring information wilhin a particular office, company or similar type of organization. 
1 % On the other hand, WAN's are generally implemented over relatively large geographical areas, and may 
if be used to transfer information between LAN's as well as between devices that are not connected to 

1SI LAN's. WAN's also include public networks, such as the Internet, which can carry information for a 

o 

1 §3 number of companies. 

1 6 Generally, in both LANs and WANs route information is transferred among devices connected in 

1 7 networks in the form of message packets, employing routers, bridges, gateways and olher switching devices 

1 8 (generally, routers) to transfer the message packets thereamong. The routers are interconnected in a mesh 

19 pattern. A LAN that is connected to a WAN typically includes a firewall to mediate communications 

20 between the LAN and the WAN. Since the routers in a LAN, as well as a WAN, are connected in a mesh 

2 1 pattern, errors can arise in which message packets are transferred in loops. As more and more message 
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1 packets are caught up in a loop, the network bandwidth devoted to such message packets increases, 

2 decreasing the bandwidth available for other message packets at least in that region of the network. 

3 To address this problem, message packets are typically provided with "time to live" information, 

4 which allows a message packet to be discarded if it remains in the network for too long a time. Typically, 

5 both LANs and WANs make use of message packet transfer protocols corrforming to, for example, the 

6 well-known Internet protocol ("IP"), which specifies a relatively long time to live. While this does not cause 

7 a significant problem in WANs such as the Internet, it can allow message packets caught in a loop in a 

8 LAN to live for a long enough period of time that they can seriously degrade network performance. 

ql Summary Of The Invention 

tfj The invention provides a new and improved system and method for reducing the amount of 

ljlj bandwidth mat may be taken up by looping message packets in a local area network 

if In brief summary, the invention in one aspect provides a device for connection to a communication 

Q link in a local area network. The device includes a message packet generator for generating a message 

ft packet for transmission over the network. In generating the message packet, the message packet generator 

j| provides a time to live field that contains an initial value that is preferably selected to be a function of the 

U maximum path length for transfer of message packets within the local area network. 

1 7 In another aspect, the invention provides a firewall for connection between a local area network 

18 and an external network. Ihe firewall receives message packets from me exterrml network fo^ 

19 to a destination device connected to the local area network, each message packet including a time to live 

20 field The firewall, prior to transmitting the message packet over the local area network, substitutes for the 

21 value in the time to live field a value that is preferably selected to be a function of the maximum path length 

22 for transfer of message packets within the local area network. For message packets that the firewall 

23 receives from the local area network for transmission over the external network, the firewall substitutes a 
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1 default initial value that is selected for use for message packets transmitted over the external network in the 

2 time to live field, which typically will be significantly higher than the initial value that is used in the local area 

3 network. 

4 Since the initial time to live value used in the local area network is preferably selected to be a 

5 function of the maximum path length for transfer of message packets within the local area network, it can 

6 be much lower than the value that is typically used. This can reduce the bandwidth taken up by message 

7 packets that are in a loop in the local area network, which, in turn, can allow for increased bandwidth 

8 available for message packets that are being transferred through a portion of the loop but which are not 

9 themselves looping through the entire loop. 

1 1 Brief Description Of The Drawings 

j|| This invention is pointed out with particularity in the appended claims. The above and further 

i I advantages of this invention may be better understood by referring to the following description taken in 

fi conjunction with the accompanying drawings, in which: 

f 1§ FIG. 1 is a functional block diagram of a network domain constructed in accordance with the 

K| invention; 

1 g FIG. 2 depicts the structure of an illustrative message packet used in connection with the network 

1 7 domain depicted in FIG. 1 ; and 

1 8 FIG. 3 is a flow chat depicting operations performed by a firewall used in the network domain 

1 9 depicted in FIG. 1 in connection with the invention. 
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1 Detailed Description of an Illustrative Embodiment 

2 FIG. 1 is a functional block diagram of a network domain 1 0 constructed in accordance with the 

3 invention. With reference to FIG. 1, network domain 10 includes a plurality of sub-domains 11(1) through 

4 1 1 (6) (generally identified by reference numeral 1 1 (n)) and at least one firewall 1 2 interconnected by a 

5 plurality of communication links generally identified by reference numeral 13(p). Generally, the firewall 1 2 

6 operates to regulate communications between the network domain 12, which may be a local area network 

7 maintained by a private organization, and devices (not shown) external to the network domain 10 that may 

8 wish to communicate with devices in the network domain 10 over, for example, a public network such as 
9 ;=£ the Internet, the public switched telephony network (PSTN) and the like, as will be described below. 

IQjl As noted above, network domain 10 includes a plurality of sub-domains ll(n). Each sub-domain 

1 ift 1 1 (n), in turn, comprises one or more devices generally identified by reference numeral 14(d) and at least 

li}) one router 16(n)mtercx>nnectedby a sub-d^ Generally, the devices 14(d) 

1 jfl transfer information in the form of message packets over the sub-domain communication link 15. For 

1 43 message packets that are to be transferred from a device 14(d) in one sub-domain 1 1 (n) to a device 14(d') 

151J in another sub-domain ll(ri) (n' n), those message packets will be received by the router 16(n) of sub- 
1 domain 1 l(n) and transferred to a router 16(n') that is associated with another sub-domain 1 l(n,). The 

1 'P sub-domain 1 l(n,) may or may not be the sub-domain 1 l(n') that contains the destination device 14(d'). 

1 8 If the sub-domain 1 l(n,) is the sub-domain 1 l(n') that contains the destination device 14(6!), the router 

19 I6(p!) that receives the message packet will transmit the message packet over the communication link 

20 15(n') associated with that sub-domain 1 l(n'), thereby to facilitate reception thereof by the destination 

21 device 14(n'). 

22 On the other hand, if the sub-domain 11(h) is not the sub-domain ll(n') that contains the 

23 destination device 14(n"), the router 1 6(nj) of that sub-domain 1 l(n,) that receives the message packet, 

24 will forward the message packet to a router 1 6(r^) of another sub-domain 1 1 (%). These operations will 
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1 be repeated by routers 16(h), 16(h).... of successive sub-domains 1 1(h), 1 l(n 2 )... until the message 

2 packet is received by the router 16(n') of the sub-domain 1 l(n') that contains the destination device 14(d). 

3 When the router 16(n') receives the message packet, it will transmit the message packet over the 

4 communication link 1 5(n f ) to facilitate reception by the destination device 14(ri). The successive routers 

5 1 6(h), 1 6(n 2 ) .... define a path from the sub-domain 1 1 (n) that contains the device 14(d) that is the source 

6 of the message packet, and the sub-domain 1 l(ri) that contains the device 14(d) that is the destination. 

7 As yet mother possibility, a device 14(d) may wish to send a message packet to an external device 

8 (not shown), that is, a device that is not connected in the network domain 10, over the Internet, PSTN, or 

9 other external network. In that case, the message packet will be transferred by the router 1 6(n) of the sub- 
10. domain 1 l(n) that contains the to the firewall 12, either directly or through one or more other routers 
1=1! 1 6(h), 1 6(h)— in a manner similar to that described above. When the firewall 1 2 receives the message 
L§ packet, it can determine whether the communication between the device 14(d) and the external device is 
ijfj authorized, and, if so, forward the message packet over the external network connection 1 7. Similarly, if 
lflf an external device wishes to transmit a message packet to a device 1 4(d) connected in the network domain 
15 1 0, the firewall 12 will receive the message packet from the external network connection 17. After the 
lii firewall 12 receives the message packet, it can determine whether the communication between the external 
Iffj device and the device 14(d) is authorized and, if so, forward the message packet to the router 16(n) of the 
lS sub-domain 1 l(n) which the device 14(d) is connected, either directly or indirectly through one or more 

19 other routers 16(h), !6(n 2 ) along a path from the firewall 12 to the router 16(n). After the router 16(n) 

20 has received the message packet, it can transmit the message packet over the sub-domain's communication 

21 link 15(n) to facilitate reception by the device 14(d). Communications between a device 14(d) and an 

22 external device may be over a "secure tunnel," in which at least some of the information in the message 

23 packets as transmitted over the external network connection 17 is in encrypted form, or alternatively the 

24 information may be in plaintext; if the communications is over a secure tunnel, the firewall 12 will encrypt 

25 informationin the message packet as generated by the device 14(d) before transmitting the message packet 
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1 over the external network connection 17, and decrypt the encrypted information in the message packet 

2 received over the external network connection 17 before forwarding it to the device 14(d). 

3 The invention provides an arrangement that addresses a problem that can arise in connection with 

4 transfer of message packets that are transferred throughout the network domain, primarily by the routers 

5 1 6(n). In particular, there can arise situations in which loops develop so that, instead of a message packet 

6 being transferred by the routers along a path from the router 16(n), through intermediate routers 16^), 

7 16(n 2 )... to the routerl6(n f ) of the sub-domain 1 l(ri) that contains the destination device 14(d'), at some 

8 point along the path the message packet is diverted in such a way that it returns to a router 16(%) along 

9 the path previous to the router 16(ny) (%<n Y ) at which it was diverted In that case, the message will 
10 continue being transferred in the loop through routers 16(%), 16(n x+1 ),.„, ^(rv),..., 16(nx),..., ^(ny).... 
1 l ,f| This can occur if, for example, a communication link is connected incorrectly, a router is incorrectly 
12;I4 programmed, or the like. In addition, it can occur in connection with a number of message packets. As 
1 3 J* more and more message packets get caught in the loop, the bandwidth through the routers associated with 
1401 the loop taken up by those message packets increases, which can significantly degrade network 
15,; performance. 

1 6^ J To address this problem, typically each message packet is provided with a so-called "time to live" 

17]2 field, which is provided with a selected value when it is t^mitted,md is decremented by each router that 

1 80 receives it If a router decrements the value in the time to live field to zero, it will discard the message 

1 9 packet While this does not eliminate the possibility of loops developing, it can attempt to limit the injury 

20 by ensuring that message packets will be discarded after they have gone around at least a portion of a loop 

21 a maximum number of times. Typically, message packets transmitted over wide area networks such as the 

22 Internet, which also have routers that forward message packets in a manner similar to that described above 

23 in connection with network domain 10, also include time to live fields to address the possibility of loops 

24 developing, and for such message packets the value in the time to live field is initialized to a relatively high 

25 number, typically thirty-two, to accommodate the possibility that it will not be decremented sufficiently that 
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1 it will be discarded along the path from the source to the destination. Typically, that same initial value is 

2 also used as initial values in time to live fields of message packets that are to be transferred through LANs 

3 such as network domain 10. However, that value is generally much higher than would be necessary in a 

4 LAN such as network domain 10. In addition, it will be appreciated that, the higher the initial value, the 

5 longer a message packet that was in a loop would remain in the loop. 

6 Accordingly, in accordance with the invention, devices 14(d), when they generate message 

7 packets, initialize the time to live fields to a relatively small value. The initial value is preferably selected to 

8 be high enough to ensure that the value is not decremented to zero over a relatively long path to the 

9 destination device within the network domain 1 0, and in one embodiment is selected to be on the order of 
10 five. Since the initial time to live value is lower than the initial value that is normally used, if the message 
1 1| packet gets caught in a loop, it will be discarded earlier than if the initial time to live value were the initial 
1 2^ value that is normally used. Thus, if a loop develops, message packets get caught in the loop will be 
l|K discarded earlier than normally, which can reduce the amount of bandwidth that is taken up by such 
lly messages. 

1 Jq A device 14(d) will also use this reduced initial time to live value in connection with message 

lijjjj packets that are to be transmitted to external devices. In that case, when the firewall 12 proceeds to 

1 ft forward the message packet over the external network connection 1 7, it will increase the value in the time 

1 CI to live field to correspond to the initial value that is used in message packets transmitted over the Internet, 

1 9 that is, thirty-two, as described above. Similarly, when the firewall 1 2 receives a message packet from the 

20 external network connection 17, if it determines that the message packet is to be forwarded to a device 

2 1 14(d), it will substitute the initial time to live value that is selected for use in the network domain 1 0 in the 

22 time to live field This substitution will generally result in a reduction in the time to live value from that in the 

23 message packet as received over the external network connection 17, so that, if a loop develops in the 

24 network domain 1 0, message packets get caught in the loop will be discarded earlier than normally, which 

25 can reduce the amount of bandwidth that is taken up by such messages in the network domain 1 0. 
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1 Before proceeding further, it would be helpful to describe the structure of a message packet used 

2 in connection with one embodiment of the invention. FIG. 2 depicts an illustrative message packet 20 

3 including a header portion 21 and a payload data portion 22. Generally, the message packet 20 that will 

4 be described in connection with FIG. 2 will conform to the format defined for the Internet protocol, but it 

5 will be appreciated that any other convenient format may be used. In a message packet 20 that conforms 

6 to the format defined for the Internet protocol, the header portion 21 contains information that is used by 

7 the routers 16(n) and firewall 12 in connection with temsmission of message packets throughout the 

8 network domain 1 0. In addition, for message packets that a router 1 6(n) transmits onto its sub-domain's 

9 communication link 15(n), the header portion 21 contains information that each device 14(d) uses to 
1 0 determine whether it is to receive the respective message packet Similarly, for message packets that the 
IP fiiewall 12 transmits over or receives from the external network connection 17, the header portion 21 
10! contains information that is used in connection with transfer of message packets through the external 
lfl network. The payload data portion 22 of message packet 20 contains the information that the source 
1 j|t device is to transfer to the destination device. As noted above, if message packets are to be transferred 
VP over the external network over a secure tunnel, some portion of the message packets may be encrypted, 
1 gl and it should be noted that the payload data portion 22 is the portion that is to be encrypted; in that case, 
l|| the information in the header portion 21 will not be encrypted since routers, switches and the like which 
ljfi forward the message packets in the external network will need to have access to the information to route 
li^ the message packets to the respective destinations. 

20 The header portion 2 1 includes a plurality of fields, including one or more fields, generally referred 

21 to by reference numeral 23, which contain protocol information, a source address field 24, a destination 

22 address field 25, a time to live field 26, one or more fields, generally referred to by reference numeral 27, 

23 which contain miscellaneous information, and a checksum field 28. The protocol information in field(s) 23 

24 may include such information as a protocol version identifier, a quality of service identifier, and a length 

25 field The quality of service identifier can identify a priority for the message packet The length field 

26 identifies the total length of the message packet If the message packet 20 is one of a plurality of message 
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1 packets that together are fragments of a larger message packet, the protocol information may also include 

2 a fragment offset value identifying the offset of the message packet 20 into the larger message packet; this 

3 will allow the destination device to reassemble the larger message packet from the fragments. Other types 

4 of protocol information will be apparent to those skilled in the art. 

5 The source and destination address fields 24 and 25 identify the source device, the device that 

6 generated the message packet 20, and the destination device, the device that is to receive the message 

7 packet 20, respectively. 

8 The time to live field 26 receives the time to live value as described above. As noted above, the 

9 source device 14(d) in network domain 1 0 will provide an initial time to live value, and each router 1 6(n) 
lO that receives the message packet 20 will decrement the value in the time to live field 26. Since a router 
1 jl 1 6(n) will discard the message packet 20 if the value in the time to live field decrements to zero, the initial 
t3t value provided by the source device 14(d) will preferably selected to be high enough to ensure that the 
1§J value is not decremented to zero over a relatively long path to the destination device within the network 
1=41 domain 10. 

lifj The miscellaneous information field(s) 27 can identify various options for the message packet. A 

M number of options are defined for the Internet protocol. A security option may be selected if information 

ljg in the message packet is deemed sensitive, which may affect the path over which the message packet is 

1 8 routed particularly through the external network. A source routing option may be selected whereby the 

19 source device, or a router along the path to the destination device, specifies the path therefrom to the 

20 destination device; in that case, the path is included in the miscellaneous information field(s) 27. In addition, 

21 typically the length of the header portion 21 is required to be on octet boundaries, with each octet 

22 comprising a predetermined number of bits, the miscellaneous information field(s) may include padding to 

23 ensure that the header portion 21 ends on an octet boundary. The checksum field 28 includes a value 

24 corresponding to the checksum of the values in the other fields 23 through 27. The checksum value can 

25 be used to verify that the information in the fields 23 through 27 was correctly received. If the checksum 
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1 indicates that the information in fields 23 through 27 was not correctly received, the error may result in the 

2 message packet being routed to a device that is not the intended destination, in which case the message 

3 packet can be discarded 

4 With this background, and as noted above, the firewall 12, when it receives a message packet from 

5 a router 16(n) inside the network domain 10, will substitute the normal time to live value in the time to live 

6 field 26 before it transmits the message packet over the external network connection 17. This will generally 

7 provide that the message packet will not be discarded before it reaches the destination device unless the 

8 message packet loops. Contrariwise, the firewall 12, when it receives a message packet from the external 

9 network connection 1 7, substitutes the initial time to live value selected for the network domain 1 0 in the 
10 time to live field 26 before it transmits the message packet into the network domain 10, which, as noted 
1=H above, can serve to reduce the bandwidth taken up by message packets in a loop if a loop develops in the 
lj| network domain 10. Operations performed by the fij^wall 12 k Ms connection are described in the flow 
ijll chart depicted in FIG. 3. Since the operations will be readily apparent to those skilled in the art from the 
flf above description, they will not be described further herein. 

1=:5| The invention provides a number of advantages. In particular, the invention provides an 

% arrangement that facilitates use of a time to live values within the network domain 10 that can reduce the 

l3! bandwidth taken up by message packets that are in a loop in the network domain 10, which can allow for 

1® increased bandwidth available for message packets that are being transferred through a portion of the loop 

1 9 but which are not themselves looping through the entire loop. 

20 It will be appreciated that a number of modifications may be made to the arrangement described 

21 above in connection with FIGS. 1 through3. For example, the devices 14(d) canbe any kind of devices 

22 whichmay be connected in a network domain 10, including any type of computers (illustratively, personal 

23 computers, workstations, mini- and mainframes), as well as devices, such as mass storage systems, 

24 network printers, and other devices that can store, process and otherwise make use of digital informatioa 

25 Although the network domain 1 0 has been described as making use of routers to transfer message packets 
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1 between and among sub-domains 1 l(n), it will be appreciated that any type of device that can switch 

2 message packets among a plurality of inputs and outputs may be used, including, for example, switching 

3 nodes, bridges, gateways, and the like. Furthermore, although the network domain has been described 

4 as making use of message packets that conform to the format specified in the Internet protocol, it will be 

5 appreciated that message packets of any format can be used, provided they contain a field that performs 

6 a function similar to that provided by the time to live field For example, a message packet that conforms 

7 to the format defined by the CLNP (Connectionless Network Protocol) protocol includes a "lifetime" field 

8 that performs a function similar to that provided by the time to live field 26. In addition, message packets 

9 can be transferred over communication links 13(p) and 15(n) using any convenient transfer protocol or 
10 protocols. Illustratively, message packets may be transferred over the intra-sub-domain communication 
W link 15(n) using, for example, the well-known Ethernet protocol, a token ring protocol, or any other 
1IH convenient protocol 

l3t It will be appreciated that a system in accordance with the invention can be constructed in whole 

VM or in part from special purpose hardware or a general purpose computer system, or any combination 

]}5 thereof, any portion of which may be controlled by a suitable program. Any program may in whole or in 

lfjjl part comprise part of or be stored on the system in a conventional manner, or it may in whole or in part be 

liU provided in to the system over a network or other mechanism for t^^ 

l!§f manner. In addition, it will be appreciated that the system may be operated and/or otherwise controlled 

19 by means of information provided by an operator using operator input elements (not shown) which may 

20 be connected directly to the system or which may transfer the information to the system over a network 

21 or other mechanism for transferring information in a conventional manner. 

22 The foregoing description has been limited to a specific embodiment of this invention. It will be 

23 apparent, however, that various variations and modifications may be made to the invention, with the 

24 attainment of some or all of the advantages of the invention. It is the object of the appended claims to cover 

25 these and such other variations and modifications as come within the true spirit and scope of the invention. 
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What is claimed as new and desired to be secured by Letters Patent of the United States is: 
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1 1 . A firewall for transferring message packets from an external network to a local area network, at least 

2 one of the message packets including a time to live field including a time to live value, the firewall 

3 comprising: 

4 A a message receiver configured to receive the at least one of the message packets from the external 

5 network; 

6 B. a message processor configured to process the at least one message packet to provide, in the time 

7 to live field, a time to live value selected to be related to a maximum path length for message 
tf£ packets transferred over the local area network; and 

SCI C. a message transmitter configured to transmit the at least one message packet as processed by the 
1 (S| message processor over the local area network. 

IP 2. A firewall as defined in claim 1 in which the firewall selectively transfers message packets from the 

ft j external network to the local area network. 

1 3. A firewall as defined in claim 2 in which the selection is made for a respective message packet based 

2 on whether a source for the respective message packet in the external network is authorized to transmit a 

3 message packet to a destination in the local area network. 
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1 4. A firewaall as defined in claim 1, the firewall further transferring message packets from the local area 

2 network to the external network, at least one of the message packets including a time to live field including 

3 a time to live value, 

4 A. the message receiver being further configured to receive the at least one of the message packets 

5 from the local area network; 

6 B. the message processor being further configured to process the at least one of the message packets 

7 received from the local area network to provide, in the time to live field, a predetermined arbitrary 

8 value; and 

9h C. the message transmitter being further configured to transmit the at least one of the message packets 

1 Cf f as processed by the message processor over the external network. 

jp 5 . A firewall as defined in claim 4 in which the firewall selectively transfers message packets from the local 

%* area network to the external network. 

f I 6. A firewall as defined in claim 5 in which the selection is made for a respective message packet based 

2 on whether a source for the respective message packet in the local area network is authorized to transmit 

3 a message packet to a destination in the external network 

1 7. A device for generating and transmitting at least one message packet over network, the at least one 

2 message packet including a time to live field including a time to live value, the device comprising: 
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3 A. a message generator configured to generate the at least one message packet and provide, in the 

4 time to live field, a time to live value selected to be related to a maximum path length for message 

5 packets transferred over the network; and 

6 B. a message transmitter 

7 message generator over the network. 

1 8 . A method of transferring message packets from an external network to a local area network, at least one 

2 of the message packets including a time to live field including a time to live value, the method comprising 

3 the steps of: 

4| A receiving the at least one of the message packets from the external network; 

5jj B. processing the at least one message packet to provide, in the time to live field, a time to live value 
selected to be related to a maximum path ler^ for message packets transferred over the local 

7 ; area network; and 

8jf ; C. tiarisrmtting the at least one message packet as processed over the local area network. 

1 9. A method as defined in claim 8 in which message packets are transferred from the external network to 

2 the local area network. 

1 1 0. A method as defined in claim 9 in which the selection is made for a respective message packet based 

2 on whether a source for the respective message packet in the external network is authorized to transmit a 

3 message packet to a destination in the local area network. 
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1 1 1 . A method as defined in claim 8 of further transferring message packets from the local area network to 

2 tiie external network, at least one of the message packets including a time to live field including a time to 

3 live value, the method further including the steps of 

4 A. receiving the at least one of the message packets from the local area network; 

5 B. processing the at least one of the message packets received from the local area network to 

6 provide, in the time to live field, a predetermined arbitrary value; and 

7 C. transmittng the at least one of the message packets as processed over the external network. 

IjJ 12. A method as defined in claim 11 in which message packets are transferrcd from the local ^ea network 

211 to the external network. 

13. A method as defined in claim 12 in which the selection is made for a respective message packet based 

24J on whether a source for the respective message packet in the local area network is authorized to transmit 

3D a message packet to a destination in the external network. 

1 14. A method of generating and transmitting at least one message packet over network, the at least one 

2 message packet including a time to live field including a time to live value, the device comprising: 

3 A. generating the at least one message packet and provide, in the time to live field, a time to live value 

4 selected to be related to a maximum path length for message packets transferred over the network; 

5 and 
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6 B. transmitting the at least one message packet as generated by the message generator over the 

7 network. 

1 15. A computer program product for use in connection with a computer to provide a firewall for 

2 Iransferring message packets from an external network to a local area network, at least one of Ihe message 

3 packets including a time to live field including atime to live value, the computer program product comprising 

4 a computer-readable medium having encoded thereon a message processor module configured to enable 

5 the computer process Hie at least one message packet to provide, in the time to live field, a time to live 

6 value selected to be related to a maximum path length for message packets transferred over the local area 
^* network. 

|j 16. A computer programproduct as defmedm claim ^ 

# from the local area network to the external network, at least one of the message packets including a time 

ff to live field including a time to live value, the message processor module being further configured to process 

i| the at least one of the message packets received from the local area network to provide, in the time to live 
field, a predetermined arbitrary value. 

1 1 7. A computer program product for use in connection with a computer to provide a device for generating 

2 and transmitting at least one message packet over network, the at least one message packet including a time 

3 to live field including a time to live value, the computer program product comprising a computer-readable 

4 medium having encoded thereon a message generator configured to generate the at least one message 

5 packet and provide, in the time to live field, a time to live value selected to be related to a maximum path 

6 length for message packets transferred over the network. 
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1 Abstract Of The Disclosure 

2 A local area network includes a plurality of devices and a firewall for interfacing the LAN to a wide 

3 area network. In the LAN, each device generates a message packets for transmission over the network 

4 in which a time to live field contains an initial value that is preferably selected to be a function of the 

5 maximum path length for transfer of message packets within the local area network. Similarly, the firewall, 

6 when it receives message packets from the WAN for transmission to a device on the LAN provides in the 

7 time to live field an initial value that is preferably selected to be a function of the maximum path length for 

8 ^ transfer of message packets within the local area network. When the firewall received a message packet 

9 *S from the LAN for transmission over the WAN, it provides a default initial value that is selected for use for 
1 0 : jri message packets transmitted over the WAN in the time to live field, which typically will be significantly 
llS higher than the initial value that is used in the local area network. Since the initial time to live value usedin 
1 2 - }f the local area network is preferably selected to be a function of the maximum path length for transfer of 
1 3 33 message packets within the local area network, it can be much lower than the value that is typically used 
1 401 This can reduce the bandwidth taken up by message packets that are in a loop in the local area network, 

1 5 m which, in turn, can allow for increased bandwidth available for message packets that are being transferred 

1 6 if through a portion of the loop but which are not themselves looping through the entire loop. 
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